Questions tagged [openpgp]

96 questions
25
votes
1 answer

Why is gpg --list-keys sometimes printing subkeys, sometimes not?

This question occured in the comments of "How do I display the usage flags for my encryption keys in a less hackish way?", and seems worth being answered in a Q&A form as the answer is not actually obvious. To view Torvald's OpenPGP key 449FA3AB, I…
Jens Erat
  • 18,485
  • 14
  • 68
  • 80
21
votes
2 answers

How to use gpg --gen-key in a script?

GnuPG is one of these annoying tools that has a non-scriptable command line. I want to run gpg --gen-key in a script, the rest of the process is simple commands. Any one had any luck with this? Entering the password seems to be supported, but not…
teknopaul
  • 448
18
votes
1 answer

gpg2 asking for passphrase when importing secret keys

I am trying to transfer my gpg secret keyring from gpg1 (1.4.21) to gpg2 (2.1.15) using gpg2 --import ~/.gnupg/secring.gpg gpg2 is asking for the passphrases of all the secret keys in the keyring. Why would it require the passphrases at this stage…
0range
  • 820
12
votes
2 answers

How to list trust level of OpenPGP public keys in GnuPG?

While I can determine the trust level I have placed on an individual OpenPGP public key by using the --edit-key command, is there a simple way to list all the public keys along with their trust levels from the command line?
rlandster
  • 1,522
10
votes
2 answers

How long would it take to break a 1024 bit OpenPGP encrypted email?

For WPA, there are calculators to determine the time needed to crack a passphrase, but I have found nothing for OpenPGP. How long would it take to break a 1024 bit OpenPGP encrypted email (depending on CPU power)? I'm also interested in other…
kelmat
  • 410
8
votes
1 answer

How to use GnuPG to get the smallest possible output (symmetric encryption)?

I'm trying to produce very small OpenPGP-encrypted files that can be embedded into QR codes. However, in comparison to for example OpenSSL, GnuPG seems to produce very large results for a simple input of 'a': $ echo -n a|openssl enc -aes-256-ctr|wc…
8
votes
3 answers

What determines the clearsign hash algorithm used by GnuPG?

When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 abc -----BEGIN PGP…
7
votes
1 answer

How to Install Public Keys with GPG

I am installing vagrant and I am trying to follow their instructions. My next step is to install their PGP public key. I'm on Windows so it's not as easy as just --recv-keys, I need to place this code somewhere: -----BEGIN PGP PUBLIC KEY…
7
votes
4 answers

gpg2 on Mac: How to enter passphrase on terminal instead of getting a GUI prompt?

I am using Mountain Lion and when I encrypt a file using gpg an annoying GUI prompts for me to enter the passphrase. I would like to be prompted for the passphrase in the terminal, not in an external GUI. I may be doing that remotely for example. Is…
7
votes
2 answers

What is the relationship between an OpenPGP key and its subkey?

I'm coming from using plain old RSA with OpenSSL for all my asymmetric encryption needs, which I learned fairly well, but I'm having a bit of a hard time wrapping my head around the OpenPGP protocol. Therefor, this is going to be a few questions. In…
user13129
  • 121
6
votes
1 answer

How GPG generates an MD5 fingerprint given a public key?

I have the following GPG public key stored inside a file called publickey.pub and encoded in ASCII Armor (Radix-64): -----BEGIN PGP PUBLIC KEY BLOCK----- Version:…
6
votes
2 answers

gnupg: How to exchange keys with key server

How do you exchange keys with via key server? Worked example would be great with send and find+retrieve. I know gpg --send-keys is the command but how do you find the keyid (tried all output from ---list-keys). --keyserver keys.gpugp.net works…
Brian Low
  • 236
6
votes
1 answer

Is it possible to use macOS 'Keychain' + 'TouchID' for pinentry-program?

Is there some way of configuring pinentry-mac, which I currently use to enter the passphrase for my OpenPGP card (a Yubikey), or a different program that'll store the passphrase in the macOS 'Keychain', so that I just have to use 'TouchID' rather…
OJFord
  • 641
6
votes
2 answers

How to setup SSH/PuTTY to use Yubikey OpenPGP authentication?

I would like to use YubiKey's OpenPGP interface to authenticate myself against my OpenSSH server on Windows 10: I created the keys according to this: gpg --card-status Reader ...........: Yubico Yubikey 4 OTP U2F CCID 0 Application ID ...:…
burnersk
  • 488
6
votes
1 answer

Retrieve public keys that signed a key I have

I am trying to figure out how to do the following in one command. I have an ISO image along with its signature file *.sig. I tried to verify it via GnuPG 2 but it reported a missing public key giving me its fingerprint. I have successfully retrieved…
Celdor
  • 732
1
2 3 4 5 6 7